Overview

overview

10

Static

static

10

6a52709720...48.exe

windows7-x64

10

6a52709720...48.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    6a527097203d96a00066aa69f0b49cc72d7dfcccfac86c1ed11c9b3857ddc948

  • Size

    571KB

  • MD5

    06a65c2a75c87ae2e5abd0199db80910

  • SHA1

    52245a7723166861b1f68bf3d70a927680052948

  • SHA256

    6a527097203d96a00066aa69f0b49cc72d7dfcccfac86c1ed11c9b3857ddc948

  • SHA512

    f0a8b875786f7f229c68d13ffd33ef0272f538bdf32eee8f052cc0139b8d00f2fd42544a548755d2321e2fa3d0aa3a24d2608a0a3246088632335894619be6ef

  • SSDEEP

    6144:LGzRxSVtp0l6whGfsKR+zkBpTaa5tJH3qJH3r:6t0VPFfsKAkrbPlalb

Score
10/10
upxgh0strat

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
    gh0strat
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx

Files

  • 6a527097203d96a00066aa69f0b49cc72d7dfcccfac86c1ed11c9b3857ddc948
    .exe windows x86


    Headers

    Sections

  • out.upx
    .exe windows x86


    Headers

    Sections